libxml2 vulnerabilities (CVE)

CVE records published for libxml2, newest first. Follow to get an email when a new one appears.

1 results

6.2Medium

CVE-2025-9714 1 year ago

Stack overflow in libxml2

libxml2 libxml2; Siemens RUGGEDCOM ROX MX5000; Siemens RUGGEDCOM ROX MX5000RE; Siemens RUGGEDCOM ROX RX1400

Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` wer…